Top Cybersecurity Jobs

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Manager, Cyber Product Owner drives product vision and manages cybersecurity solutions, collaborating with engineering teams, communicating roadmaps, and leveraging technical expertise to enhance capabilities and meet customer needs.

Perform IT audits and assessments across enterprise systems and applications, focusing on cybersecurity, cloud, AI, and digital infrastructure. Evaluate inherent and residual risks, test control design and effectiveness, set audit scope, and deliver value-added recommendations while mentoring associates and collaborating with stakeholders to mitigate technology risks.

The Director of Metrics Strategy and Reporting at Capital One will develop strategies for utilizing metrics to influence change in cybersecurity and technology risk reporting, overseeing the creation and implementation of improved metrics and reports, including quarterly presentations for the Board of Directors.

Lead and scale North America sales for domain security, brand protection, and cybersecurity solutions. Build repeatable sales processes, coach managers and AEs, implement MEDDIC or equivalent, drive pipeline discipline, forecast accuracy, CRM adoption, and cross-functional alignment to hit expansion and new-logo revenue targets.

Lead and manage information security and ISMS compliance (TISAX, SOX), perform internal audits, manage ITGCs and IT audits, oversee risk monitoring and incident response, support physical/site security, enforce safety policies, and develop staff with continuous improvement focus.

Conduct comprehensive cybersecurity assessments of supplier IT and cloud environments, identify risks and remediation plans, perform onsite/virtual fieldwork, advise stakeholders, and recommend process improvements to strengthen supplier risk posture and monitoring.

Design and implement enterprise cybersecurity architecture for cloud-native applications. Embed security across SDLC and CI/CD, build Python automation for monitoring and remediation, evaluate vendors, lead practice communities, and collaborate with risk and compliance to translate regulatory requirements into technical controls while validating AI-assisted security outputs.

Lead cybersecurity operational risk assessments and oversight across technology estate. Evaluate controls, conduct significant event reviews, monitor trends, present findings to senior leaders, and recommend mitigations to strengthen operational resilience.

Lead cybersecurity architecture for AI-enabled products across the CCB portfolio. Advise on strategy, design reusable cloud-native security frameworks, drive adoption of new methods, evaluate emerging technologies, and translate complex technical risks and mitigations to leadership.

Lead cybersecurity architecture for cloud-native applications within consumer banking: define target state, assess risks, propose mitigations, drive automation, lead vendor evaluations and communities of practice, and communicate solutions to senior stakeholders.

Lead cybersecurity architect responsible for designing and delivering cloud-native security solutions, threat modeling, secure design reviews, automation and CI/CD integration, vendor evaluations, AI-assisted security validation, driving reuse and controls compliance (e.g., NIST 800-53), and advising stakeholders while fostering communities of practice and inclusion.

Lead comprehensive cybersecurity assessments of supplier IT and cloud environments, identify risks and remediation plans, conduct onsite and virtual fieldwork, advise stakeholders on defensive architectures and incident response, and recommend process improvements to strengthen supplier risk posture.

Lead detection, investigation, and response to insider threats for acquisitions. Monitor user activity and logs, perform network and trace analysis, triage alerts, develop playbooks and detection strategies, provide intelligence to acquisitions, drive remediation, educate stakeholders, and serve as escalation point while supporting weekend and in-office schedules.

Investigate security issues from red team and assessment teams, perform root cause analysis, prioritize risk, design and implement technical and procedural mitigations, collaborate with stakeholders, and use enterprise AI tools to accelerate analysis and reporting while validating outputs and ensuring data security.

Lead cybersecurity architect responsible for designing and assessing data security controls across cloud and hybrid platforms (Databricks, Snowflake, AWS, GCP). Engage stakeholders, define target technical state, automate remediations, evaluate vendors, lead communities of practice, and drive secure architecture, threat modeling, and risk mitigation for enterprise-scale data platforms.

Monitor, detect, triage, and respond to security incidents across cloud and on-prem systems using SIEM, SOAR, EDR and threat intelligence. Correlate alerts, perform forensics, drive remediation, mentor junior staff, and refine detection workflows to reduce risk and incident impact.

Support C2BMC X‑Lab cybersecurity: tune and optimize security tools, create custom dashboards, integrate security products, troubleshoot and manage upgrades/deployments to improve threat detection and system performance. Work is 100% onsite and supports missile defense networks requiring clearance and facility access.

Senior Associate focused on Identity and Access Management: manage IAM client engagements, implement and utilize IAM products, analyze complex problems, mentor team members, maintain high-quality deliverables, build client relationships, and develop IAM solutions including for public cloud using Agile and DevOps practices.

Lead offensive product security and PSOC teams to run penetration tests, red team exercises, security research, detection and response, bug bounty coordination, and product security incident response. Define offensive services, assessment schedules, security research plans, and operations strategy while managing engineers and cross-functional stakeholder priorities.

Monitor and triage security alerts in a 24/7 SOC, validate and investigate incidents, determine remediation and escalate, document findings, mentor junior analysts, lead guild activities, and improve processes using enterprise AI and automation.

The Transformation Architect will lead customer engagements, guide healthcare clients in Zero Trust digital transformations, create high-level architectures, and mentor teams while focusing on the clients' business challenges and needs.

Interns will work with the Red Canary Cyber Incident Response Team, assisting in threat detection, analysis of EDR telemetry, and customer communication, while receiving mentorship for career growth.

Lead onboarding of logs from acquired entities into Splunk: identify/prioritize sources, design ingestion architecture, parse/normalize fields, and build repeatable playbooks. Partner with IT and security stakeholders, implement resilient log pipelines across cloud, on‑prem, and SaaS, ensure Splunk availability, oversee data quality and retention, support SOC search/dashboards/alerts, and leverage enterprise AI tools to automate workflows.

The Red Team Program Lead manages the Red Team Program, coordinating cybersecurity exercises, stakeholder relations, governance processes, and program outcomes while ensuring effective communication and risk management.